Overview

overview

10

Static

static

10

0d5ed3f4e6...5f.exe

windows7_x64

10

0d5ed3f4e6...5f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d5ed3f4e636494bfbbed74073d24ff73b8ee712f98cd8f9dc68da8f27a29a5f

  • Size

    1.6MB

  • Sample

    210508-8hg8jpaje2

  • MD5

    c2c75b6d6e93282b82cc1d0b1fb64832

  • SHA1

    98b366f4e1331b61bd4f765636b8d83b023051d8

  • SHA256

    0d5ed3f4e636494bfbbed74073d24ff73b8ee712f98cd8f9dc68da8f27a29a5f

  • SHA512

    e04a72cb290993342ca0757332acbff42c76608b1f46b8b7ac8cf565c4b40ef0523cfe9699028b4ad6d9a1de62a61242360606e392e427f8ca42fe33e2104c91

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      0d5ed3f4e636494bfbbed74073d24ff73b8ee712f98cd8f9dc68da8f27a29a5f

    • Size

      1.6MB

    • MD5

      c2c75b6d6e93282b82cc1d0b1fb64832

    • SHA1

      98b366f4e1331b61bd4f765636b8d83b023051d8

    • SHA256

      0d5ed3f4e636494bfbbed74073d24ff73b8ee712f98cd8f9dc68da8f27a29a5f

    • SHA512

      e04a72cb290993342ca0757332acbff42c76608b1f46b8b7ac8cf565c4b40ef0523cfe9699028b4ad6d9a1de62a61242360606e392e427f8ca42fe33e2104c91

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks